Package · Maven

org.webjars.npm:handlebars

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.6

CVE-2021-23369 Public exploit

Remote Code Execution (RCE)

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

handlebars node-handlebars node-handlebars org.webjars.npm:handlebars Debian Ubuntu npm Maven

Apr 12, 2021